Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kemyUb21o-46wcSMNhYN5Fw3moQ.roa
File: kemyUb21o-46wcSMNhYN5Fw3moQ.roa (raw, json)
Hash identifier: XFpjEOYI66HfBI1c2labihoY4eJ6TkPNThUmeqNAsyE=
Subject key identifier: 91:E9:B2:51:BD:B5:A3:EE:3A:C1:C4:8C:36:16:0D:E4:5C:37:9A:84
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D5DF0D0B0EA80E2FEAEF771B1ADF8EA5E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kemyUb21o-46wcSMNhYN5Fw3moQ.roa
Signing time: Wed 31 Jan 2024 05:14:39 +0000
ROA not before: Wed 31 Jan 2024 05:14:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5d:f0:d0:b0:ea:80:e2:fe:ae:f7:71:b1:ad:f8:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 31 05:14:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91e9b251bdb5a3ee3ac1c48c36160de45c379a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:b5:eb:2f:5c:d4:b9:a0:98:d5:61:11:a7:
25:28:28:ec:b4:bd:80:ac:81:bd:66:1a:94:71:b0:
f7:b6:dc:67:2e:d9:08:2f:d5:69:99:0e:24:d7:d2:
86:ef:3b:e3:70:6b:22:ba:01:94:04:de:ce:04:a5:
41:f1:cc:4b:bb:d0:1f:bf:ea:f9:14:46:43:92:25:
f4:a9:11:74:11:ed:c7:95:d6:c7:03:37:83:52:e5:
cd:fa:7e:ee:56:0d:f2:0a:17:3a:e7:bd:55:0c:c3:
52:cf:c5:cd:71:20:c5:d1:30:02:8e:15:11:06:cd:
fa:38:30:08:23:0c:c8:de:3f:d9:0a:08:83:dd:b6:
f9:d8:ee:93:3f:5c:2f:83:24:c2:c7:1d:b9:6e:82:
60:91:8f:14:39:be:96:86:42:f0:66:41:2a:0f:cc:
0f:6f:1d:b1:9d:a7:ba:1a:26:12:e2:1c:d4:eb:92:
e9:b7:5d:9a:26:64:1d:10:42:6a:d2:43:40:33:45:
41:b9:be:3d:de:9c:a4:5c:c3:57:b1:4f:e2:2c:9c:
7a:82:70:5b:9f:5a:39:fd:dd:e2:5d:6a:b9:99:af:
03:a9:13:99:60:ee:d4:58:98:5c:7f:89:a6:87:3c:
15:79:d0:40:de:49:0e:86:51:23:14:b0:46:67:7f:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E9:B2:51:BD:B5:A3:EE:3A:C1:C4:8C:36:16:0D:E4:5C:37:9A:84
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kemyUb21o-46wcSMNhYN5Fw3moQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:2e:a6:ca:c4:91:1a:f7:22:d9:19:7d:38:b0:08:8e:83:3a:
c6:a2:e4:b4:d5:84:c0:92:9f:09:1b:1f:9f:90:9a:db:8e:f6:
91:28:44:e5:91:e5:89:c2:4d:40:62:65:5f:19:f0:4b:2f:a6:
fe:4b:28:e1:ce:25:f2:9b:e9:1d:0d:c3:44:2d:a2:7e:f3:20:
e4:93:3b:22:83:99:8b:36:22:9b:23:94:65:59:29:21:ba:19:
3c:6d:ba:83:cc:f0:d8:2e:88:78:6a:86:7b:f4:cc:40:f5:10:
ec:97:ac:98:4d:93:3c:52:48:34:3a:73:20:f5:7e:f6:dd:0c:
e5:9e:e1:15:b6:d1:ef:cf:34:ea:6e:e9:f3:ef:77:3e:68:99:
a2:67:9c:80:1f:22:7f:67:92:40:6b:f6:81:37:40:9b:16:57:
a4:0a:05:b7:fb:56:74:c3:8d:fd:8f:dc:87:fe:8a:ca:86:bc:
07:55:d1:cb:30:47:e0:7c:db:7c:2f:d3:97:d3:6b:5b:6f:ad:
22:dc:c6:3c:84:1a:90:aa:ac:0f:47:51:85:73:a8:0c:97:47:
9e:9e:d2:b1:17:ba:df:54:96:fd:52:b9:11:e4:70:55:c9:ea:
23:07:bf:a4:22:70:2f:d4:1a:a0:8f:84:25:18:d3:ea:18:28:
d8:cf:5f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:32 2025 by rpki-client